Lead Principal Security Engineer

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

– Oversees comprehensive security assessments across a wide range of complex products and services.

– Drives research and development of cutting-edge testing tools and methodologies, staying at the forefront of security innovation.

– Provides expert guidance and leadership in security design and coding (e.g., reviewing code, writing code for complex investigation), influencing Oracle's security strategy and roadmap.

– Proactively participates in reviews of security alerts.

Event Response:

– Uses deep expertise to recognize and escalate more nuanced, highly complex security violations, leveraging advanced technologies and industry best practices.

– Oversees the containment and mitigation of high-impact security events, ensuring effective response and recovery.

– Contributes to in-depth post-event reviews, identifying systemic vulnerabilities and driving continuous improvement initiatives.

Compliance:

– Coordinates comprehensive compliance assessments, identifying and addressing high-complexity security compliance gaps.

– Oversees the review of security compliance deliverables, ensuring alignment with internal and external obligations.

– Implements compliance strategies, staying abreast of internal and external obligations.

– Oversees the management of Oracle-wide inventory systems, implementing systems and controls to track and secure company assets.

Business Continuity Support:

– Strategizes business continuity and disaster recovery plans, aligning them with Oracle's goals and internal and external obligations.

– Implements comprehensive plans, processes, and procedures to safeguard critical systems and data, leveraging advanced technologies and risk management frameworks.

– Oversees Oracle's readiness for certifications and audits, driving continuous improvement and ensuring compliance with relevant standards and regulations.

Data Security and Privacy:

– Oversees the implementation of robust data security frameworks, ensuring the effective utilization of encryption, hashing, masking, access management, and other advanced techniques to ensure the confidentiality and integrity of sensitive information.

– Conducts audits to evaluate the effectiveness of existing documentation and procedures, leading efforts to continuously improve data security practices Oracle-wide.

Research and Innovation:

– Guides research, thought leadership, and collaboration with stakeholders to drive the development of cutting-edge security solutions that address emerging and future threats.

– Monitors the global security landscape, identifying trends, risks, and opportunities for Oracle to maintain a competitive edge in security practices.

– Drives the exploration and adoption of innovative techniques and technologies to solve highly complex and newly emerging security problems.

Core Responsibilities

Planning & Execution:

– Manages and provides direction on timelines, deliverables, and budgets when applicable for critical high-impact projects or initiatives that impact the line of business, ensuring timely completion and adherence to requirements.

– Anticipates and plans for shifts in resources or timelines based on changing business priorities, ensuring optimal outcomes.

Collaboration & Partnership:

– Influences cross-functional leaders and external stakeholders to gain alignment on strategic objectives.

– Fosters partnerships with key business leaders, stakeholders, and/or customers, identifying opportunities for expanding partnerships and promoting long-term organizational success.

– Champions transparency and inclusivity by actively seeking, listening to, and incorporating diverse perspectives.

Problem Solving:

– Leads specialized, advanced problem-solving efforts, serving as an escalation point for complex issues.

– Guides others to leverage innovative data-driven techniques to address ambiguous or novel issues, identify root causes, and drives the implementation of solutions that prevent future issues.

Continuous Learning:

– Leverages deep industry knowledge and expertise to serve as a thought leader within the organization.

– Contributes to the advancement of the field or industry through thought leadership (e.g., conference presentations, white papers, research contributions).

– Maintains and evolves expertise in relevant areas by proactively monitoring emerging trends, technologies, and industry standards, ensuring the organization remains current with best practices.

– Champions continuous learning and knowledge sharing, promoting professional development across teams. Applies new knowledge to drive advancement and mentors others to do the same.

Continuous Improvement:

– Develops innovative solutions and drives the implementation of ideas that increase the efficiency and effectiveness of processes, protocols, and workflows across the organization.

– Evaluates effectiveness of updated approaches and methods for continued improvement to enhance efficiencies and ensure changes align with organizational goals.

– Designs and develops metrics to measure success of improvement initiatives.

Performance and Development:

– Serves as a subject matter expert regarding talent needs and organizational talent strategy.

– Imparts leadership and expert knowledge throughout the talent development pipeline, including candidate interviews, candidate assessment, and hiring decisions, ensuring alignment with organizational talent strategy.